golang-github-prometheus-promu vulnerabilities
CVEs whose affected-version data names the golang-github-prometheus-promu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-0750Medium· 6.6Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading t…
▾ SunlitRed Hat · cri-oEPSS 0.27%via CVEORG
CVE-2024-9676Medium· 6.5Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malic…
▾ SunlitRed Hat · containers/storageEPSS 1.3%via CVEORG